Configuring AutoSSL

[SGroupGeorge]

Hi,

I find it a bit hard to configure AutoSSL on some subdomains.

I've so far done the following

1. Enabled cPanel AutoSSL provider
2. Added AutoSSL on the user packages (it was already there)
3. Run AutoSSL for all users
4. Looked a the logs. I can see the following

The website “subdomain.website.com”, owned by “website”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.

but also

WARN The domain “www.subdomain.website.com” has failed domain control validation (“www.subdomain.website.com” does not resolve to any IPv4 addresses on the internet.). at bin/autossl_check.pl line 434.

It's been a while since i did the above, but i cannot seem to find the SSL on WHM or cPanel.

I also tried installing cPanel Store as a Market Provider Manager but didn't make any difference.

Looking at Manage AutoSSL - Documentation - cPanel Documentation did not provide any instructions that i haven't applied already.

I'm probably missing something here, but i was expecting the SSL certificates to appear under SSL/TSL on the user's cPanel.

Any ideas or instructions will be much appreciated.

 

[cPanelMichael]

WARN The domain “www.subdomain.website.com” has failed domain control validation (“www.subdomain.website.com” does not resolve to any IPv4 addresses on the internet.). at bin/autossl_check.pl line 434.

Hello,

This message suggests the subdomain does not resolve to a valid IP address. Could you verify the that particular subdomain resolves to the IP address associated with the cPanel account?

Thank you.

 

[SGroupGeorge]

Hi Michael,

Yes, this is for www.subdomain.website.com but i don't really use that. I only need it without the www which is the first log. Would it not work just on the non-www?

 

[cPanelMichael]

Here's the relevant section of the AutoSSL document:

AutoSSL includes corresponding www. domains for each domain and subdomain in the certificate, and those www. domains count towards any domain or rate limits.

• For example, if your domain is example.com, AutoSSL will automatically include www.example.com in the certificate.
• If the corresponding www.domain does not pass a DCV test, AutoSSL will not attempt to secure that www.domain.
• This affects Let's Encrypt's limit of 20 certificates per week that may contain a domain or its subdomains.

Could you verify if the non-www version of the subdomain was secured?

Thank you.

 

[SGroupGeorge]

Hi Michael,

How do i check if the domain is secured? The main domain has its own SSL which is paid for and therefore should be secured. That SSL also covers www.domain.com.

We would like to secure the subdomains of it however, so https://subdomain.domain.com and we don't need the www version for those.

 

[cPanelMichael]

How do i check if the domain is secured?

Are you able to access the subdomain via the "https" URL in your browser's address bar?

Thank you.

 

[SGroupGeorge]

Yes, although i get a browser warning with regards to the missing certificate and if i ignore it, i get to the main domain's page.

When i install a self-signed SSL, it works fine although a bad issuer warning is coming up on the browser.

 

[cPanelMichael]

Yes, although i get a browser warning with regards to the missing certificate and if i ignore it, i get to the main domain's page.

When i install a self-signed SSL, it works fine although a bad issuer warning is coming up on the browser.

Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

Thanks!